pulumi-azure-native 2.61.0a1726250321__py3-none-any.whl → 2.62.0a1726562525__py3-none-any.whl

pulumi_azure_native/pulumi-plugin.json

@@ -1,5 +1,5 @@
 {
   "resource": true,
   "name": "azure-native",
-  "version": "2.61.0-alpha.1726250321"
+  "version": "2.62.0-alpha.1726562525"
 }

pulumi_azure_native/security/__init__.py

@@ -20,6 +20,7 @@ from .azure_servers_setting import *
 from .connector import *
 from .custom_assessment_automation import *
 from .custom_entity_store_assignment import *
+from .custom_recommendation import *
 from .defender_for_storage import *
 from .dev_ops_configuration import *
 from .dev_ops_policy_assignment import *
@@ -38,6 +39,7 @@ from .get_azure_servers_setting import *
 from .get_connector import *
 from .get_custom_assessment_automation import *
 from .get_custom_entity_store_assignment import *
+from .get_custom_recommendation import *
 from .get_defender_for_storage import *
 from .get_dev_ops_configuration import *
 from .get_dev_ops_policy_assignment import *
@@ -51,9 +53,11 @@ from .get_security_connector import *
 from .get_security_connector_application import *
 from .get_security_contact import *
 from .get_security_operator import *
+from .get_security_standard import *
 from .get_server_vulnerability_assessment import *
 from .get_sql_vulnerability_assessment_baseline_rule import *
 from .get_standard import *
+from .get_standard_assignment import *
 from .get_workspace_setting import *
 from .governance_assignment import *
 from .governance_rule import *
@@ -68,9 +72,11 @@ from .security_connector import *
 from .security_connector_application import *
 from .security_contact import *
 from .security_operator import *
+from .security_standard import *
 from .server_vulnerability_assessment import *
 from .sql_vulnerability_assessment_baseline_rule import *
 from .standard import *
+from .standard_assignment import *
 from .workspace_setting import *
 from ._inputs import *
 from . import outputs
@@ -127,6 +133,8 @@ if typing.TYPE_CHECKING:
     v20240401 = __v20240401
     import pulumi_azure_native.security.v20240515preview as __v20240515preview
     v20240515preview = __v20240515preview
+    import pulumi_azure_native.security.v20240801 as __v20240801
+    v20240801 = __v20240801
 else:
     v20170801preview = _utilities.lazy_import('pulumi_azure_native.security.v20170801preview')
     v20190101 = _utilities.lazy_import('pulumi_azure_native.security.v20190101')
@@ -153,4 +161,5 @@ else:
     v20240301preview = _utilities.lazy_import('pulumi_azure_native.security.v20240301preview')
     v20240401 = _utilities.lazy_import('pulumi_azure_native.security.v20240401')
     v20240515preview = _utilities.lazy_import('pulumi_azure_native.security.v20240515preview')
+    v20240801 = _utilities.lazy_import('pulumi_azure_native.security.v20240801')
 

pulumi_azure_native/security/_enums.py

@@ -11,6 +11,7 @@ __all__ = [
     'ApplicationSourceResourceType',
     'AssessmentStatusCode',
     'AssessmentType',
+    'AttestationComplianceState',
     'AuthenticationType',
     'AutoDiscovery',
     'AutoProvision',
@@ -20,9 +21,11 @@ __all__ = [
     'DescendantBehavior',
     'DevOpsPolicyType',
     'DevOpsProvisioningState',
+    'Effect',
     'Enforce',
     'EnvironmentType',
     'EventSource',
+    'ExemptionCategory',
     'ExportData',
     'GovernanceRuleOwnerSourceType',
     'GovernanceRuleSourceResourceType',
@@ -37,16 +40,19 @@ __all__ = [
     'PropertyType',
     'Protocol',
     'RecommendationConfigStatus',
+    'RecommendationSupportedClouds',
     'RecommendationType',
     'Roles',
     'RuleState',
     'ScanningMode',
+    'SecurityIssue',
     'SecuritySolutionStatus',
     'ServerVulnerabilityAssessmentsAzureSettingSelectedProvider',
     'ServerVulnerabilityAssessmentsSettingKind',
     'Severity',
     'SeverityEnum',
     'Source',
+    'StandardSupportedCloud',
     'StandardSupportedClouds',
     'State',
     'Status',
@@ -132,6 +138,15 @@ class AssessmentType(str, Enum):
     """
 
 
+class AttestationComplianceState(str, Enum):
+    """
+    Attest category of this assignment
+    """
+    UNKNOWN = "unknown"
+    COMPLIANT = "compliant"
+    NON_COMPLIANT = "nonCompliant"
+
+
 class AuthenticationType(str, Enum):
     """
     Connect to your cloud account, for AWS use either account credentials or role-based authentication. For GCP use account organization credentials.
@@ -241,6 +256,15 @@ class DevOpsProvisioningState(str, Enum):
     DELETION_FAILURE = "DeletionFailure"
 
 
+class Effect(str, Enum):
+    """
+    Expected effect of this assignment (Audit/Exempt/Attest)
+    """
+    AUDIT = "Audit"
+    EXEMPT = "Exempt"
+    ATTEST = "Attest"
+
+
 class Enforce(str, Enum):
     """
     If set to "False", it allows the descendants of this scope to override the pricing configuration set on this scope (allows setting inherited="False"). If set to "True", it prevents overrides and forces this pricing configuration on all the descendants of this scope. This field is only available for subscription-level pricing.
@@ -283,6 +307,14 @@ class EventSource(str, Enum):
     REGULATORY_COMPLIANCE_ASSESSMENT_SNAPSHOT = "RegulatoryComplianceAssessmentSnapshot"
 
 
+class ExemptionCategory(str, Enum):
+    """
+    Exemption category of this assignment
+    """
+    WAIVER = "waiver"
+    MITIGATED = "mitigated"
+
+
 class ExportData(str, Enum):
     RAW_EVENTS = "RawEvents"
     """
@@ -480,6 +512,15 @@ class RecommendationConfigStatus(str, Enum):
     ENABLED = "Enabled"
 
 
+class RecommendationSupportedClouds(str, Enum):
+    """
+    The cloud that the recommendation is supported on.
+    """
+    AZURE = "Azure"
+    AWS = "AWS"
+    GCP = "GCP"
+
+
 class RecommendationType(str, Enum):
     """
     The type of IoT Security recommendation.
@@ -588,6 +629,18 @@ class ScanningMode(str, Enum):
     DEFAULT = "Default"
 
 
+class SecurityIssue(str, Enum):
+    """
+    The severity to relate to the assessments generated by this Recommendation.
+    """
+    VULNERABILITY = "Vulnerability"
+    EXCESSIVE_PERMISSIONS = "ExcessivePermissions"
+    ANONYMOUS_ACCESS = "AnonymousAccess"
+    NETWORK_EXPOSURE = "NetworkExposure"
+    TRAFFIC_ENCRYPTION = "TrafficEncryption"
+    BEST_PRACTICES = "BestPractices"
+
+
 class SecuritySolutionStatus(str, Enum):
     """
     Status of the IoT Security solution.
@@ -624,7 +677,7 @@ class Severity(str, Enum):
 
 class SeverityEnum(str, Enum):
     """
-    The severity to relate to the assessments generated by this assessment automation.
+    The severity to relate to the assessments generated by this Recommendation.
     """
     HIGH = "High"
     MEDIUM = "Medium"
@@ -649,6 +702,15 @@ class Source(str, Enum):
     """
 
 
+class StandardSupportedCloud(str, Enum):
+    """
+    The cloud that the standard is supported on.
+    """
+    AZURE = "Azure"
+    AWS = "AWS"
+    GCP = "GCP"
+
+
 class StandardSupportedClouds(str, Enum):
     """
     The cloud that the standard is supported on.

pulumi_azure_native/security/_inputs.py

@@ -22,12 +22,16 @@ __all__ = [
     'AllowlistCustomAlertRuleArgsDict',
     'AssessmentStatusArgs',
     'AssessmentStatusArgsDict',
+    'AssignedAssessmentItemArgs',
+    'AssignedAssessmentItemArgsDict',
     'AssignedComponentItemArgs',
     'AssignedComponentItemArgsDict',
     'AssignedStandardItemArgs',
     'AssignedStandardItemArgsDict',
     'AssignmentPropertiesAdditionalDataArgs',
     'AssignmentPropertiesAdditionalDataArgsDict',
+    'AttestationEvidenceArgs',
+    'AttestationEvidenceArgsDict',
     'AuthorizationArgs',
     'AuthorizationArgsDict',
     'AutomationActionEventHubArgs',
@@ -226,6 +230,8 @@ __all__ = [
     'OnPremiseSqlResourceDetailsArgsDict',
     'OnUploadPropertiesArgs',
     'OnUploadPropertiesArgsDict',
+    'PartialAssessmentPropertiesArgs',
+    'PartialAssessmentPropertiesArgsDict',
     'ProxyServerPropertiesArgs',
     'ProxyServerPropertiesArgsDict',
     'RecommendationConfigurationPropertiesArgs',
@@ -250,6 +256,10 @@ __all__ = [
     'SensitiveDataDiscoveryPropertiesArgsDict',
     'ServicePrincipalPropertiesArgs',
     'ServicePrincipalPropertiesArgsDict',
+    'StandardAssignmentPropertiesAttestationDataArgs',
+    'StandardAssignmentPropertiesAttestationDataArgsDict',
+    'StandardAssignmentPropertiesExemptionDataArgs',
+    'StandardAssignmentPropertiesExemptionDataArgsDict',
     'StandardComponentPropertiesArgs',
     'StandardComponentPropertiesArgsDict',
     'SuppressionAlertsScopeArgs',
@@ -493,6 +503,42 @@ class AssessmentStatusArgs:
         pulumi.set(self, "description", value)
 
 
+if not MYPY:
+    class AssignedAssessmentItemArgsDict(TypedDict):
+        """
+        Describe the properties of a security assessment object reference (by key)
+        """
+        assessment_key: NotRequired[pulumi.Input[str]]
+        """
+        Unique key to a security assessment object
+        """
+elif False:
+    AssignedAssessmentItemArgsDict: TypeAlias = Mapping[str, Any]
+
+@pulumi.input_type
+class AssignedAssessmentItemArgs:
+    def __init__(__self__, *,
+                 assessment_key: Optional[pulumi.Input[str]] = None):
+        """
+        Describe the properties of a security assessment object reference (by key)
+        :param pulumi.Input[str] assessment_key: Unique key to a security assessment object
+        """
+        if assessment_key is not None:
+            pulumi.set(__self__, "assessment_key", assessment_key)
+
+    @property
+    @pulumi.getter(name="assessmentKey")
+    def assessment_key(self) -> Optional[pulumi.Input[str]]:
+        """
+        Unique key to a security assessment object
+        """
+        return pulumi.get(self, "assessment_key")
+
+    @assessment_key.setter
+    def assessment_key(self, value: Optional[pulumi.Input[str]]):
+        pulumi.set(self, "assessment_key", value)
+
+
 if not MYPY:
     class AssignedComponentItemArgsDict(TypedDict):
         """
@@ -532,11 +578,11 @@ class AssignedComponentItemArgs:
 if not MYPY:
     class AssignedStandardItemArgsDict(TypedDict):
         """
-        describe the properties of a of a security standard object reference
+        Describe the properties of a of a standard assignments object reference
         """
         id: NotRequired[pulumi.Input[str]]
         """
-        full resourceId of the Microsoft.Security/standard object
+        Full resourceId of the Microsoft.Security/standard object
         """
 elif False:
     AssignedStandardItemArgsDict: TypeAlias = Mapping[str, Any]
@@ -546,8 +592,8 @@ class AssignedStandardItemArgs:
     def __init__(__self__, *,
                  id: Optional[pulumi.Input[str]] = None):
         """
-        describe the properties of a of a security standard object reference
-        :param pulumi.Input[str] id: full resourceId of the Microsoft.Security/standard object
+        Describe the properties of a of a standard assignments object reference
+        :param pulumi.Input[str] id: Full resourceId of the Microsoft.Security/standard object
         """
         if id is not None:
             pulumi.set(__self__, "id", id)
@@ -556,7 +602,7 @@ class AssignedStandardItemArgs:
     @pulumi.getter
     def id(self) -> Optional[pulumi.Input[str]]:
         """
-        full resourceId of the Microsoft.Security/standard object
+        Full resourceId of the Microsoft.Security/standard object
         """
         return pulumi.get(self, "id")
 
@@ -601,6 +647,62 @@ class AssignmentPropertiesAdditionalDataArgs:
         pulumi.set(self, "exemption_category", value)
 
 
+if not MYPY:
+    class AttestationEvidenceArgsDict(TypedDict):
+        """
+        Describe the properties of a assignment attestation
+        """
+        description: NotRequired[pulumi.Input[str]]
+        """
+        The description of the evidence
+        """
+        source_url: NotRequired[pulumi.Input[str]]
+        """
+        The source url of the evidence
+        """
+elif False:
+    AttestationEvidenceArgsDict: TypeAlias = Mapping[str, Any]
+
+@pulumi.input_type
+class AttestationEvidenceArgs:
+    def __init__(__self__, *,
+                 description: Optional[pulumi.Input[str]] = None,
+                 source_url: Optional[pulumi.Input[str]] = None):
+        """
+        Describe the properties of a assignment attestation
+        :param pulumi.Input[str] description: The description of the evidence
+        :param pulumi.Input[str] source_url: The source url of the evidence
+        """
+        if description is not None:
+            pulumi.set(__self__, "description", description)
+        if source_url is not None:
+            pulumi.set(__self__, "source_url", source_url)
+
+    @property
+    @pulumi.getter
+    def description(self) -> Optional[pulumi.Input[str]]:
+        """
+        The description of the evidence
+        """
+        return pulumi.get(self, "description")
+
+    @description.setter
+    def description(self, value: Optional[pulumi.Input[str]]):
+        pulumi.set(self, "description", value)
+
+    @property
+    @pulumi.getter(name="sourceUrl")
+    def source_url(self) -> Optional[pulumi.Input[str]]:
+        """
+        The source url of the evidence
+        """
+        return pulumi.get(self, "source_url")
+
+    @source_url.setter
+    def source_url(self, value: Optional[pulumi.Input[str]]):
+        pulumi.set(self, "source_url", value)
+
+
 if not MYPY:
     class AuthorizationArgsDict(TypedDict):
         """
@@ -7383,6 +7485,42 @@ class OnUploadPropertiesArgs:
         pulumi.set(self, "is_enabled", value)
 
 
+if not MYPY:
+    class PartialAssessmentPropertiesArgsDict(TypedDict):
+        """
+        Describes properties of an assessment as related to the standard
+        """
+        assessment_key: NotRequired[pulumi.Input[str]]
+        """
+        The assessment key
+        """
+elif False:
+    PartialAssessmentPropertiesArgsDict: TypeAlias = Mapping[str, Any]
+
+@pulumi.input_type
+class PartialAssessmentPropertiesArgs:
+    def __init__(__self__, *,
+                 assessment_key: Optional[pulumi.Input[str]] = None):
+        """
+        Describes properties of an assessment as related to the standard
+        :param pulumi.Input[str] assessment_key: The assessment key
+        """
+        if assessment_key is not None:
+            pulumi.set(__self__, "assessment_key", assessment_key)
+
+    @property
+    @pulumi.getter(name="assessmentKey")
+    def assessment_key(self) -> Optional[pulumi.Input[str]]:
+        """
+        The assessment key
+        """
+        return pulumi.get(self, "assessment_key")
+
+    @assessment_key.setter
+    def assessment_key(self, value: Optional[pulumi.Input[str]]):
+        pulumi.set(self, "assessment_key", value)
+
+
 if not MYPY:
     class ProxyServerPropertiesArgsDict(TypedDict):
         """
@@ -8171,6 +8309,138 @@ class ServicePrincipalPropertiesArgs:
         pulumi.set(self, "secret", value)
 
 
+if not MYPY:
+    class StandardAssignmentPropertiesAttestationDataArgsDict(TypedDict):
+        """
+        Additional data about assignment that has Attest effect
+        """
+        assigned_assessment: NotRequired[pulumi.Input['AssignedAssessmentItemArgsDict']]
+        """
+        Component item with key as applied to this standard assignment over the given scope
+        """
+        compliance_state: NotRequired[pulumi.Input[Union[str, 'AttestationComplianceState']]]
+        """
+        Attest category of this assignment
+        """
+        evidence: NotRequired[pulumi.Input[Sequence[pulumi.Input['AttestationEvidenceArgsDict']]]]
+        """
+        Array of links to attestation evidence
+        """
+elif False:
+    StandardAssignmentPropertiesAttestationDataArgsDict: TypeAlias = Mapping[str, Any]
+
+@pulumi.input_type
+class StandardAssignmentPropertiesAttestationDataArgs:
+    def __init__(__self__, *,
+                 assigned_assessment: Optional[pulumi.Input['AssignedAssessmentItemArgs']] = None,
+                 compliance_state: Optional[pulumi.Input[Union[str, 'AttestationComplianceState']]] = None,
+                 evidence: Optional[pulumi.Input[Sequence[pulumi.Input['AttestationEvidenceArgs']]]] = None):
+        """
+        Additional data about assignment that has Attest effect
+        :param pulumi.Input['AssignedAssessmentItemArgs'] assigned_assessment: Component item with key as applied to this standard assignment over the given scope
+        :param pulumi.Input[Union[str, 'AttestationComplianceState']] compliance_state: Attest category of this assignment
+        :param pulumi.Input[Sequence[pulumi.Input['AttestationEvidenceArgs']]] evidence: Array of links to attestation evidence
+        """
+        if assigned_assessment is not None:
+            pulumi.set(__self__, "assigned_assessment", assigned_assessment)
+        if compliance_state is not None:
+            pulumi.set(__self__, "compliance_state", compliance_state)
+        if evidence is not None:
+            pulumi.set(__self__, "evidence", evidence)
+
+    @property
+    @pulumi.getter(name="assignedAssessment")
+    def assigned_assessment(self) -> Optional[pulumi.Input['AssignedAssessmentItemArgs']]:
+        """
+        Component item with key as applied to this standard assignment over the given scope
+        """
+        return pulumi.get(self, "assigned_assessment")
+
+    @assigned_assessment.setter
+    def assigned_assessment(self, value: Optional[pulumi.Input['AssignedAssessmentItemArgs']]):
+        pulumi.set(self, "assigned_assessment", value)
+
+    @property
+    @pulumi.getter(name="complianceState")
+    def compliance_state(self) -> Optional[pulumi.Input[Union[str, 'AttestationComplianceState']]]:
+        """
+        Attest category of this assignment
+        """
+        return pulumi.get(self, "compliance_state")
+
+    @compliance_state.setter
+    def compliance_state(self, value: Optional[pulumi.Input[Union[str, 'AttestationComplianceState']]]):
+        pulumi.set(self, "compliance_state", value)
+
+    @property
+    @pulumi.getter
+    def evidence(self) -> Optional[pulumi.Input[Sequence[pulumi.Input['AttestationEvidenceArgs']]]]:
+        """
+        Array of links to attestation evidence
+        """
+        return pulumi.get(self, "evidence")
+
+    @evidence.setter
+    def evidence(self, value: Optional[pulumi.Input[Sequence[pulumi.Input['AttestationEvidenceArgs']]]]):
+        pulumi.set(self, "evidence", value)
+
+
+if not MYPY:
+    class StandardAssignmentPropertiesExemptionDataArgsDict(TypedDict):
+        """
+        Additional data about assignment that has Exempt effect
+        """
+        assigned_assessment: NotRequired[pulumi.Input['AssignedAssessmentItemArgsDict']]
+        """
+        Component item with key as applied to this standard assignment over the given scope
+        """
+        exemption_category: NotRequired[pulumi.Input[Union[str, 'ExemptionCategory']]]
+        """
+        Exemption category of this assignment
+        """
+elif False:
+    StandardAssignmentPropertiesExemptionDataArgsDict: TypeAlias = Mapping[str, Any]
+
+@pulumi.input_type
+class StandardAssignmentPropertiesExemptionDataArgs:
+    def __init__(__self__, *,
+                 assigned_assessment: Optional[pulumi.Input['AssignedAssessmentItemArgs']] = None,
+                 exemption_category: Optional[pulumi.Input[Union[str, 'ExemptionCategory']]] = None):
+        """
+        Additional data about assignment that has Exempt effect
+        :param pulumi.Input['AssignedAssessmentItemArgs'] assigned_assessment: Component item with key as applied to this standard assignment over the given scope
+        :param pulumi.Input[Union[str, 'ExemptionCategory']] exemption_category: Exemption category of this assignment
+        """
+        if assigned_assessment is not None:
+            pulumi.set(__self__, "assigned_assessment", assigned_assessment)
+        if exemption_category is not None:
+            pulumi.set(__self__, "exemption_category", exemption_category)
+
+    @property
+    @pulumi.getter(name="assignedAssessment")
+    def assigned_assessment(self) -> Optional[pulumi.Input['AssignedAssessmentItemArgs']]:
+        """
+        Component item with key as applied to this standard assignment over the given scope
+        """
+        return pulumi.get(self, "assigned_assessment")
+
+    @assigned_assessment.setter
+    def assigned_assessment(self, value: Optional[pulumi.Input['AssignedAssessmentItemArgs']]):
+        pulumi.set(self, "assigned_assessment", value)
+
+    @property
+    @pulumi.getter(name="exemptionCategory")
+    def exemption_category(self) -> Optional[pulumi.Input[Union[str, 'ExemptionCategory']]]:
+        """
+        Exemption category of this assignment
+        """
+        return pulumi.get(self, "exemption_category")
+
+    @exemption_category.setter
+    def exemption_category(self, value: Optional[pulumi.Input[Union[str, 'ExemptionCategory']]]):
+        pulumi.set(self, "exemption_category", value)
+
+
 if not MYPY:
     class StandardComponentPropertiesArgsDict(TypedDict):
         """